Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-20 · source-backed
Arctic Wolf published a critical advisory for a CVSS 10.0 vulnerability in the mcp-atlassian MCP server — one of the most widely deployed connectors linking agents to Jira, Confluence, and Bitbucket. A remote attacker with zero credentials can execute arbitrary code and pivot into internal networks via SSRF. Any enterprise agent workflow connecting to Atlassian tools via MCP is exposed. Patch immediately or isolate.
Each link below shares sources, entities, or timing with this story.
Atlassian supports MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Atlassian supports MCP); both cover Atlassian, Confluence, Jira; overlapping topics (agent, atlassian, confluence, connector).
Codex CLI uses MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Codex CLI uses MCP); both cover CVE, CVSS, MCP, SSRF; overlapping topics (cvss, server).
Atlassian supports MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Atlassian supports MCP); both cover Atlassian, Confluence, Jira; overlapping topics (agent, arbitrary, atlassian, attacker).
Microsoft supports MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft supports MCP); both cover CVE, CVSS, MCP, SSRF; overlapping topics (credential, server).
Microsoft supports MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Microsoft supports MCP); both cover CVE, CVSS, MCP; overlapping topics (code, server).
Microsoft supports MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft supports MCP); both cover CVE, CVSS, MCP; overlapping topics (agent, code, critical).
Claude Code uses MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover CVE, CVSS, MCP; overlapping topics (code, cvss, server).
OpenAI supports MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (OpenAI supports MCP); both cover CVE, CVSS; overlapping topics (advisory, agent, attacker, credential, cvss).